Consumer Education Center

Security Awareness

The Call Center nor the fraud department will never ask you for your PIN (personal identification number: the four digit number you set for your debit card), CVV Code (the three digit code located on the back of your debit card) or the expiration dates on your debit card.

A text alert warning of suspicious activity on a card will NEVER include:

• A link to be clicked. Cardholders should never click on a link in a text message that is supposedly from FSNB.
• Vague reference to a “Merchant” transaction; details should be included in the transaction that is being questioned.
• Requests for your data such as card numbers, PINs, CVV Code, and expiration dates

A text alert from us will always be from a 5-digit number and NOT a 10-digit number resembling a phone number.

A phone call from one of our Call Center agents will only include a request for your Zip code, and no other personal information, unless you confirm that a transaction is fraudulent.

• Only then will you be transferred to an agent, who will ask questions to confirm your identity before going through the transaction history. If, at any point you are uncertain about questions being asked or the call itself, you should hang up and call us directly.

If a call is received by you, claiming to be your Call Center and asking to verify transactions, no information should have to be provided by you other than your Zip code, and a ‘yes’ or ‘no’ to the transactions provided.

FSNB will NEVER send you an e-mail asking for personal identification numbers or any other confidential information such as your account numbers, debit card PIN or login passwords. Do not respond to any e-mail communication claiming to be from FSNB that threatens to close or lock your account or instructs you to click on a link in the e-mail. Delete the e-mail immediately. Like many other companies, FSNB is concerned about the increased attempts to breach the privacy of customers by tricking you into responding to e-mails that appear to be sent by FSNB. When we need to contact you, it will be done in a general way that informs you of our message but NEVER asks for your personal and confidential information. Your privacy is our utmost concern.

Consumer Liability: Tell us AT ONCE if you believe your card, PIN or login identification and password have been lost, stolen or otherwise compromised, or if you believe that an electronic fund transfer has been made without your permission using information from your checking account. Telephoning is the best way of keeping your possible losses down.

You could lose all the money in your account (plus your maximum overdraft protection or line of credit). If you tell us within 2 business days after you learn of the loss or theft of your card and/or code, you can lose no more than $50 if someone used your card and/or code without your permission. If you do NOT tell us within 2 business days after you learn of the loss or theft of your card and/or code, and we can prove we could have stopped someone from using your card and/or code without your permission if you had told us, you could lose as much as $500.

Also, please review your account statement carefully. If your statement shows transfers that you did not make, including those made by card, code or other means, tell us AT ONCE. If you do not tell us within 60 days after the statement was mailed to you, you may not get back any money you lost after the 60 days if we can prove that we could have stopped someone from taking the money if you had told us in time. If a good reason (such as a long trip or a hospital stay) kept you from telling us, we may extend the time periods. Visa debit card Liability: Unless you have been grossly negligent or have engaged in fraud, you will not be liable for any point-of-sale transactions using your lost or stolen FSNB Visa debit card. This additional limit on liability does not apply to ATM transactions or to PIN transactions which are not processed by Visa. Visa is a registered trademark of Visa International Service Association.

To notify FSNB call 1-800-749-4583, Monday through Friday from 7:00 a.m. to 7:00 p.m., Saturday 8:00 a.m. to 1:00 p.m. (Central Time)

In the event that you notice suspicious activity on your account, please contact FSNB at 1-800-749-4583 for assistance.

Phishing

Phishing is an attempt to fool you into disclosing your personal and financial information, such as your username, password, account number, social security number, etc. These scammers send official-looking e-mails and pretend to be from trusted institutions. You might be asked to validate or confirm your personal information by sending a reply, clicking on a link, or opening an attachment.

TIPS TO AVOID PHISHING SCAMS

• Don’t click on links or attachments in suspicious e-mails or text messages. Always type the website address into your browser directly.
• Set up a spam filter. A spam filter can reduce the number of phishing e-mails you receive.
• Do not enter your confidential data in any window that may pop-up while you are carrying out a financial transaction online.
• Do not transact or share confidential data on non-https websites.
• Do not open e-mails or attachments in e-mails sent from people you don’t know.
• Change your passwords regularly. Unlike your credit card, your password does not have to be physically stolen in order to be used to access your information, so it is hard to know when your password has been stolen.

Pharming

Pharming is a type of social engineering cyberattack in which criminals redirect internet users trying to reach a specific website to a different, fake site. These “spoofed” sites aim to capture a victim’s personally identifiable information (PII) and log-in credentials, such as passwords, social security numbers, account numbers, and so on, or else they attempt to install pharming malware on their computer. Pharmers often target websites in the financial sector, including banks, online payment platforms, or e-commerce sites, usually with identity theft as their ultimate objective.

TIPS TO AVOID PHARMING

• Use a reliable internet service provider which will filter out suspicious redirects for you.
• Only follow links that begin with HTTPS, not HTTP. The “s” stands for “secure” and tells you the site has a security certificate.
• Don’t click on links or open attachments from unknown senders. Avoid clicking on links or opening attachments in any email or message you are unsure of.
• Look for typos in URLs. Criminals will use a variety of spelling tricks to trick you into believing it is a legitimate website.
• Avoid deals that seem too good to be true – it usually is.
• Enable two-factor authentication whenever possible.

Smishing

Smishing is a variation of phishing where cyber criminals use compelling SMS text messaging to target mobile banking customers into clicking a link and sending the criminal private information or downloading malicious programs to their smartphone. As mobile banking becomes more and more common, it has become an efficient way for criminals to steal your private information.

HOW DOES SMISHING WORK?
Any person or company will need to send you a message with a link embedded in it, so you should view such messages with suspicion. They will usually show up as you are trying to verify an account or making an inquiry or having an active conversation with someone.

TIPS TO AVOID SMISHING

• Financial institutions will never send a text asking for credentials or private information. If in doubt, call your financial institution and verify the request.
• Never send private information to someone via text messages.
• Avoid responding to phone numbers you do not recognize.
• Avoid storing private information on your mobile device. Should a criminal install malware on your smartphone, your private information could be compromised.

Quishing

Quishing is a variation of phishing where cyber criminals use QR codes to target mobile banking customers into scanning a QR code and sending the criminal private information or downloading malicious programs to their smartphone. As mobile banking becomes more and more common, it has become an efficient way for criminals to steal your private information. Additional information on quishing can be found at International Association of Financial Crimes Investigators.

HOW DOES QUISHING WORK?
Quishing may be combined with a phishing scam or pop-up scam and try to entice you to scan a QR code. Quishing can also be a standalone attack facilitated by QR codes put in public places like on the sides of ATMs or on bulletin boards or in restaurants that use pay-at-the-table services.

TIPS TO AVOID QUISHING

• Before scanning a QR code, do a bit of inspection and research. Do you see another QR code underneath the visible code? Is the QR code located somewhere you would expect to find one?
• Before clicking the link presented by the QR code after scanning it with your mobile device, check for misspelled words and letter substitutions in the link.
• Avoid scanning QR codes that arrive from sources you do not recognize.
• Avoid storing private information on your mobile device. Should a criminal install malware on your smartphone, your private information could be compromised.

Scams

Work-at-Home-Scams:

Victims are often hired to “process payments,” “transfer funds,” or “reship products.” These job scams involve the victims receiving and cashing fraudulent checks, transferring illegally obtained funds for the criminals, or receiving stolen merchandise and shipping it to the criminals.

Other victims sign up to be a “mystery shopper,” receiving fraudulent checks with instructions to cash the checks and wire the funds to “test” a company’s services. Victims are told they will be compensated with a portion of the merchandise or funds.

Work-at-home schemes attract otherwise innocent individuals, causing them to become part of criminal schemes without realizing they are engaging in illegal behavior.

Job scams often provide criminals the opportunity to commit identity theft when victims provide their personal information, sometimes even bank account information, to their potential “employer.” The criminal/employer can then use the victim’s information to open credit cards, post on-line auctions, register websites, etc., in the victim’s name to commit additional crimes.

If you have been a victim of Internet crime, please file a complaint at www.ic3.gov.

Scam Alerts:

If you can answer "YES" to any of the following questions, you could be involved in a FRAUD or about to be SCAMMED

Is the CHECK from an item you sold on the internet, such as a car, boat, jewelry, etc.?

Is the amount of the CHECK more than the item's selling price?

Did you receive the CHECK via overnight delivery service?

Is the CHECK connected to communicating with someone by e-mail?

Is the CHECK drawn on a business or individual account that is different from the person buying your item or product?

Have you been informed that you were the winner of LOTTERY, such as Canadian, Australian, El Gordo, or El Mundo, that you did not enter?

Have you been instructed to either "WIRE", "SEND" or "SHIP MONEY", as soon as possible, to a large U.S. City or to another country such as Canada, Englad, or Nigeria?

Have you been asked to PAY money to receive a deposit from another country such as Canada, England, or Nigeria?

Are you receiving PAY or a COMMISSION for facilitating money transfers through your account?

Did you respond to an e-mail requesting you to CONFIRM, UPDATE, OR PROVIDE your account information.

Identity Theft Protection

Identity theft is one of the fastest growing crimes in the world. ID theft occurs when a person assumes another person’s personal, confidential identifying information such as your name, Social Security number, date of birth, etc., in order to commit fraud.

Your personal information can be stolen in a variety of ways:

• Data breaches
• Physical loss or theft of your credit and/or debit cards
• Mail theft
• Your PIN or password being visible to others
• Scam calls
• Phishing emails
• Spyware
• Computer hacking
• Data breaches

There are simple steps you can take to protect yourself against identify theft, including:

• Monitoring your credit report.
• Removing unused credit cards and IDs from your wallet.
• Move to paperless statements and electronic billing.
• Beware of giving information to anyone over the telephone or Internet unless you initiate.
• Do not keep your PINs attached to credit, debit, or ATM cards.
• Protect your computer with a firewall and other security software and keep it updated.
• Keep your personal identifying information locked in secure locations.
• Check your credit report at least once a year to identify accounts which may have been opened without your knowledge.

What's In Your Wallet

While methods used by identity thieves to steal personal information have grown increasingly sophisticated over the last ten years, older methods of stealing personal identification documents through crimes of opportunity - including theft of wallets and purses - remain common. While you can't prevent a high-tech identity thief from hacking a computer database of a company that has collected your personal information, you can control what you carry with you on a daily basis.

A simple rule of thumb that everyone can use to reduce the amount of personal information and identification documents they carry and thereby reduce their risk of identity theft.

Only carry personal information and identification documents you need that day. By reducing the amount of personal identifying information you carry in your wallet or purse, you can reduce your potential exposure to identity theft if your wallet or purse is lost or stolen. Equally important, you will reduce the amount of time spent replacing all the lost or stolen personal information and documents in your wallet or purse.

What should be in your wallet or purse:

1. Driver's license or another form of state-issued identification
2. Automobile registration and insurance if required by law.
3. One or two credit/debit cards for the day (don't write PINs on the back).
4. Any other personal identification document you need that day only.

What should NOT be in your wallet or purse:

1. Passport or Social Security Cards or any form of identification containing your SS number
2. Excess credit and debits cards, checks, Health cards, Frequent flyers cards, Car rental cards, or store loyalty cards
3. Passwords, personal identification numbers, account numbers, or any other personal identification documents.

Credit Report

Your Accesss to Free Credit Reports

Your credit report is an important part of your financial life that can determine whether you can get credit, how good or bad the terms are, and how much it costs you to borrow.

You can have access to all three of your credit reports once a year. The three different credit reports are similar but not identical. You do have to be careful because there are many websites that state they offer you a free credit report but may charge you for other services. Checking your credit report yearly is recommended to keep your information accurate.

What Is a Credit Report?

A credit report is a summary of your personal credit history. Your credit report includes your identifying information — like your address and date of birth — and information about your credit history — like how you pay your bills or if you filed for bankruptcy. Getting your credit report can help protect your credit history from mistakes, errors, or signs of identity theft.

The Fair Credit Reporting Act guarantees you access to a free credit report from each of the three nationwide reporting agencies — Experian, Equifax, and TransUnion — every twelve months. Be careful! The Federal Trade Commission has received complaints from consumers who were tricked into believing they were ordering their free annual credit report, but instead paid hidden fees or agreed to unwanted services. Go to the authorized source AnnualCreditReport.com when you request your free report. You can also order your report toll-free at 1-877-322-8228, or via mail. For more information, visit: http://www.ftc.gov/freereports.

Under federal law, you’re entitled to a free credit report if:

• you get a notice saying that your application for credit, employment, insurance, or other benefit has been denied or another unfavorable action has been taken against you, based on information in your credit report. That’s known as an adverse action notice. You must ask for your report within 60 days of getting the notice. The notice will give you the name, address, and phone number of the credit bureau, and you can request your free report from them
• you’re out of work and plan to look for a job within 60 days
• you’re on public assistance, like welfare
• your report is inaccurate because of identity theft or another fraud
• you have a fraud alert in your credit file

If you fall into one of these categories, contact a credit bureau

Credit Reporting Agencies

There are three major credit reporting agencies: Equifax, Experian, and TransUnion.
These agencies receive information from a variety of creditors, usually monthly, about whether you are making loan and credit card payments on time. The agencies also collect information about bankruptcy filings, court-ordered judgments, tax liens, and other public record information from courthouse records.

Information Contained in a Credit Report

The reports from each of the credit agencies look different, but generally contain the same basic information.

1. Your identifying information, including:
• Name
• Social Security Number (SSN)
• Current and previous addresses
• Telephone number
• Birth date
• Current and previous employers
• Spouse’s name, if married
2. A report containing your credit history
3. A list of inquiries
4. A report containing information about you in public records (e.g., collection accounts, bankruptcies, foreclosures, tax liens, civil judgments, delinquent student loan payments, and late child support payments)

Credit Score

Your credit score is based on the information in your credit report.

• Your credit score—sometimes referred to as a credit rating or Fair Isaac Corporation (FICO) Score—is a number that helps lenders determine how much of a credit risk you may be.
• It has become increasingly common for lenders to make decisions largely based on credit scores.

It is important to learn how the score is calculated so you can improve your score if necessary to obtain credit.

• Your payment history is the largest percentage of your credit score. That is why it is important to pay your bills on time.

If you do not have a history of late payments, your score may be lowered if your credit card balance is close to the limit or if you have just begun to use credit.

Creditors may use one or more credit scores. They may generate the scores themselves, or they may use a score calculated by another firm. Two of the scores used by creditors and lenders are FICO Score and VantageScore.

How to Get Your Free Annual Credit Report

To order your free annual report from one or all three of the credit reporting agencies, do one of the following:

• Submit a request online at www.annualcreditreport.com
• Call toll-free: 1-877-322-8228
• Complete the Annual Credit Report Request Form and mail it to:

Annual Credit Report Request Service
P. O. Box 105281
Atlanta, GA 30348-5281

You can print a copy of the Annual Credit Report Request Form from www.annualcreditreport.com or www.ftc.gov/credit. You will need to provide:

• Your name, address, SSN, and date of birth
• Your previous address if you have moved in the last 2 years
• Identifying information specific to you for security purposes (e.g., amount of your monthly mortgage payment)
• Different information for each requesting company, because the information each has in your file may come from different sources

Credit Freeze

By placing a credit freeze on all three major credit bureaus you maintain control over who can access your credit file and when, also blocking identity thieves from opening accounts in your name. Credit freezes are also called security freezes by the credit bureaus.

Learn more about Credit Freeze:

Perhaps the single best way to protect against an identity thief opening a new credit account in your name is to place a credit freeze on your credit files with all three major credit bureaus. Credit freezes are often called security freezes by the three major credit bureaus.

By placing a credit freeze on your credit files at all three major credit bureaus, you maintain control over who can access your credit report and when, thereby blocking identity thieves from using your name and credit to open fraudulent credit accounts and harming you and your credit profile.

Through a combination of state laws and voluntary programs in place at all three major credit bureaus, anyone can place a credit freeze on their credit files. But remember, you must place the credit freeze at each of the three major credit bureaus individually.

When you place a credit freeze on your credit files, you will either select or be provided a password or PIN (personal identification number) so that you can temporarily remove the credit freeze when you want to add a new credit account to your credit file. Be sure to maintain this password or PIN in a secure location so that it will be available when you need to temporarily lift the credit freeze.

Depending on the state you reside in and whether or not you have been a victim of identity theft, there may be a fee for initiating a credit freeze and for lifting the freeze when you need to grant access to your credit report to a potential creditor.

The three major credit bureaus are Equifax, Experian and TransUnion.

The combination of large and small security breaches have statistically put all Americans personal identifiable information at risk. With the digitization of medical records security breaches will become even more common and raise the odds each individual's risk of becoming an identity theft victim.

While everyone should consider placing a credit freeze on their credit files maintained by all three of the major credit bureaus, it is especially important that seniors, those responsible for incapacitated seniors and parents of children give extra consideration to initiating credit freezes.

Identity thieves specifically target children and seniors as they are much less likely to monitor their credit files and are also less likely to detect if a fraudulent account has been opened in their name. This is because children and seniors do not typically open new credit accounts and therefore have little need to check their credit reports.

Active Duty Alerts

‘My savings were drained’:
Veterans’ pensions and benefits are a target for fraud, feds warn | Stars and Stripes

If you are a member of a military service unit who is on active duty, consider placing an active duty alert on your credit report. The active duty alert can prevent prescreened offers of credit and insurance being sent while you are away on active duty. By placing a credit freeze on all three major credit bureaus you maintain control over who can access your credit file and when, also blocking identity thieves from opening accounts in your name. Credit freezes are also called security freezes by the credit bureaus.

By placing a credit freeze on all three major credit bureaus you maintain control over who can access your credit file and when, also blocking identity thieves from opening accounts in your name. Credit freezes are also called security freezes by the credit bureaus.

An active duty alert on your report is effective for one year, unless you request that the alert be removed sooner. If your deployment lasts longer, you may place another alert on your report. Credit reporting agencies must offer free electronic credit monitoring to all active duty servicemembers as of May 2019.

Card Protection

The best protection against card fraud is to know where your cards are at all times and to keep them in a secure location. FSNB fraud protection services will never ask for your full card number, expiration date, or security code. If you receive a phone call asking for any card information, DO NOT divulge your information – immediately report the concern to FSNB immediately.

TIPS TO SECURE YOUR CARDS:

• Turn on suspicious activity alerts.
• Create a strong password for your credit and debit card accounts.
• Take advantage of multifactor authentication when it is offered.
• Do not choose a PIN that is personal to you, such as your birthday or digits from your SSN.
• Be selective when you offer your card information over the phone.
• Be careful with your receipts. Check your receipts against your account to spot potentially fraudulent transactions quickly. Shred what you do not need and securely file the rest.
• If you use a digital wallet, make your smartphone harder to unlock by requiring a passcode, face-ID or fingerprint. Consider removing your banking information from Autofill on your browser.
• Report lost cards and suspected fraud right away. If you lose your card or suspect fraudulent activity, contact FSNB right away.

Helpful Links

1. Department of the Treasury - Information about issued U.S. Treasury Checks; how they can be verified, if they are too old, what is the secure seal and what if no issue record is in the TCVS? Find out more at Treasury Check Verification System - TCVS

2. Go Direct – Social Security, VA or other Federal Benefits being received by paper check are out of compliance with the law. The U.S. Department of Treasury requires federal benefit payments to be made electronically – through direct deposit to a bank or credit union account or to the Direct Express® Debit Mastercard® card. Go Direct® - Home

3. Treasury Direct – How to buy savings bonds, Gift savings bonds, Tax FAQs, Find the value of your savings bonds, Interest rates for Savings Bonds, and so much more at TreasuryDirect - Home (savingsbond.gov)

4. FDIC – The Federal Deposit Insurance Corporation (FDIC) is an independent agency created by the Congress to maintain stability and public confidence in the nation’s financial system. The FDIC insures deposits; examines and supervises financial institutions for safety, soundness, and consumer protection; makes large and complete financial institutions resolvable; and manages receiverships. Learn more at FDIC: Federal Deposit Insurance Corporation.

5. OCC – Office of the Comptroller of the Currency - The Office of the Comptroller of the Currency (OCC) charters, regulates, and supervises all national banks and federal savings associations as well as federal branches and agencies of foreign banks. The OCC is an independent bureau of the U.S. Department of the Treasury and is led by the Comptroller of the Currency. For more information go to Office of the Comptroller of the Currency (OCC)

6. Federal Reserve - The Federal Reserve System performs five functions to promote the effective operation of the U.S. economy and, more generally, to serve the public interest. It includes three key entities: the Board of Governors, 12 Federal Reserve Banks, and the Federal Open Market Committee. The Federal Reserve performs five key functions in the public interest to promote the health of the U.S. economy and the stability of the U.S. financial system. For more information go to Federal Reserve Board - Home

7. CFPB - Is the Consumer Financial Protection Bureau, a U.S. government agency dedicated to making sure you are treated fairly by banks, lenders and other financial institutions. Help with finances during the COVID-19 pandemic, talk with an expert about your housing needs for free or submit a complaint about a financial product or service at Consumer Financial Protection Bureau (consumerfinance.gov).

8. BankersOnline.com – Read about today’s top stories in the world of banking, shop for all your banking needs, Tech Talk, Newsletters, Regulations and much more at Bankers Online.

9. Oklahoma Bankers Association - Serves approximately 200 member banks. Based in Oklahoma City, the OBA assists its members with government relations, educational programs, legal and compliance services, communications, insurance products and numerous products and services. Find out more at Oklahoma Bankers Association – We make bankers better! (oba.com)

10. The Fair Credit Reporting Act guarantees you access to a free credit report from each of the three nationwide reporting agencies — Experian, Equifax, and TransUnion — every twelve months. Be careful! The Federal Trade Commission has received complaints from consumers who were tricked into believing they were ordering their free annual credit report, but instead paid hidden fees or agreed to unwanted services. Go to the authorized source AnnualCreditReport.com when you request your free report. You can also order your report toll-free at 1-877-322-8228, or via mail. For more information, visit: http://www.ftc.gov/freereports

11. Veterans Benefits Banking Program (VBBP) - Veterans and their beneficiaries now have additional options for receiving VA benefits via direct deposit, as well as access to financial services at participating banks. Speak with an accredited Financial Counselor for help to create a budget, spending plan or savings plan. FSNB is proud to be a member of the VBBP!
Veterans Benefits Banking Program (VBBP) - Veterans Benefits Administration (va.gov) Military Veterans Checking and Savings Accounts | FSNB

Check out helpful Military links on FSNB’s military page: Military Useful Information | Fort Sill National Bank (fsnb.com)